A newly identified advanced persistent threat actor, tracked as CL-STA-1062, has been conducting a prolonged espionage campaign against government entities and critical infrastructure across Southeast Asia since at least Q3 2023. The threat actor employs custom malware toolsets, sophisticated living
The Federal Communications Commission (FCC) has enacted comprehensive cybersecurity regulations targeting emergency alert systems and undersea cable infrastructure. These rules establish mandatory security protocols, vulnerability reporting requirements, and enhanced protection measures for systems
A critical vulnerability lurking in cURL for 25 years has finally been patched, affecting an estimated 30 billion devices worldwide. This long-standing flaw impacted one of the most widely deployed software libraries in existence, embedded in everything from smartphones and IoT devices to enterprise
A critical vulnerability (CVE-2026-11374) in ManageEngine AD360’s Single Sign-On implementation allows attackers to predict authentication tokens, potentially gaining unauthorized access to integrated identity management systems. The flaw affects AD360 versions prior to build 6402 and enables attack
IBM has unveiled groundbreaking sub-1 nanometer chip technology, representing a significant leap in semiconductor miniaturization. While this advancement promises unprecedented computational power and efficiency, it introduces novel security challenges including increased vulnerability to side-chann
Nation-state threat actors have successfully infiltrated Australia’s critical infrastructure networks, establishing persistent access designed to enable destructive attacks at strategically opportune moments. The compromise represents a sophisticated pre-positioning campaign where adversaries have e
Google has rolled out enhanced privacy controls across Search and Play services, giving users granular control over activity history and personalization settings. The updates include improved deletion tools, simplified privacy dashboards, and new opt-out mechanisms for data collection. While these c
A critical use-after-free vulnerability (CVE-2026-50263) has been discovered in the X.Org Server’s CreateSaverWindow function, allowing authenticated local attackers to read sensitive information from freed memory regions. The flaw affects multiple Linux distributions and Unix-like systems still run
Microsoft has significantly evolved its Cloud-Native Application Protection Platform (CNAPP) capabilities, aligning with industry-leading cloud security solutions. The enhancement consolidates multiple security tools into a unified platform, offering comprehensive visibility, risk assessment, and th
A critical vulnerability dubbed “PixelSmash” has been discovered in FFmpeg, one of the world’s most widely used multimedia processing frameworks. The flaw (CVE-2024-XXXXX) enables attackers to achieve remote code execution through specially crafted video files. With FFmpeg integrated into thousands